by Kastro CVE-2026-107360
Red Hat Red Hat Satellite 6.16 for RHEL 8 — Rubygem-safemode: safemode: jail allow-list bypass via op-assign expressions
Description · from the CVE record
A flaw was found in rubygem-safemode. Compound assignment expressions in sandboxed code are evaluated without mediating method calls through the Jail allow-list. An authenticated attacker who can supply template content can invoke arbitrary no-argument methods on objects exposed to the template renderer without Jail mediation, including destructive operations such as host deletion and disclosure of non-allow-listed object state.
Affected
ProductAffectedFixed inSource
Red Hat Satellite 6.16 for RHEL 8see advisory0:1.5.0-3.el8satCNA
Red Hat Satellite 6.16 for RHEL 9see advisory0:1.5.0-3.el9satCNA
Red Hat Satellite 6.17 for RHEL 9see advisory0:1.5.0-3.el9satCNA
Red Hat Satellite 6.18 for RHEL 9see advisory0:1.5.0-3.el9satCNA
Scores by source
redhat (CNA)9.6CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N